NFM Lending Lawsuit: Ransomware Claim, Six Class Actions, No Settlement
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The NFM Lending lawsuit in the news is a data breach case. Around September 7, 2026, the ransomware group Interlock claimed it took more than 2.5 terabytes of data from the Maryland mortgage lender. Within roughly three weeks, six proposed class actions were filed in federal court in Maryland. As of October 12, 2026, there is no settlement, no claim form, no deadline and no money to collect.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuits Say Happened
NFM Lending is a residential mortgage lender headquartered in Linthicum, Maryland, licensed in 49 states. Mortgage files hold exactly what identity thieves want: Social Security numbers, income and bank details, loan terms.
On or around September 7, 2026, dark-web monitoring sites picked up a post in which Interlock claimed a breach of NFM's systems. The group claims it took more than 2.5 terabytes, including customer Social Security numbers and financial account information, and employee files. Those are the attackers' claims, not confirmed facts.
NFM confirmed that “an unauthorized third party gained access to certain IT systems” and said it brought in a forensics team. The lawsuits allege NFM failed to keep reasonable safeguards, failed to train staff on cybersecurity, and had not told customers when the Smith suit was filed. The Smith complaint pleads negligence, breach of implied contract, unjust enrichment and violation of the Maryland Consumer Protection Act.
Case Details
All six suits found so far are in the U.S. District Court for the District of Maryland, each brought by a named plaintiff on behalf of a proposed class:
Koppenhaver v. NFM Lending, LLC, No. 1:26-cv-03607 (filed September 11, 2026)
Romancik v. NFM Lending LLC, No. 1:26-cv-03627 (September 14, 2026)
Clark v. NFM Lending, LLC, No. 1:26-cv-03632 (September 14, 2026)
Smith v. NFM Lending, LLC, No. 1:26-cv-03661-JKB (September 16, 2026), assigned to Judge James K. Bredar
Richardson v. NFM Lending, LLC, No. 1:26-cv-03677 (September 17, 2026)
Salvi v. NFM Lending, LLC, No. 1:26-cv-03862 (September 29, 2026)
Romancik and Clark were assigned to Magistrate Judge Erin Aslan. Suits like these are usually consolidated into one case; as of October 12, 2026 we have not been able to confirm a consolidation order.
Status: Early Lawsuits, No Settlement
The key open fact is scope. In the statement reported on September 24, 2026, NFM said it “cannot confirm the number of people impacted” and that it is following notification protocols. Until NFM mails breach notices, nobody outside the company knows whose files were taken. The company also called the suits “designed to revictimize organizations” — expect it to fight them.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Could Be Affected
The Smith complaint proposes a class of everyone in the United States whose private information was exposed in the breach, past and current customers alike. Interlock also claims it took employee files, so current and former NFM staff may be affected too.
NFM's family of companies includes Main Street Home Loans, BluPrint Home Loans, Elevate Home Loans and Element Home Loans. If your loan came through one of those brands, you may have been an NFM customer.
The practical test is a notice letter. If NFM determines your data was involved, it should mail you a breach notice. Keep it — it says which data was involved and is the easiest proof that you belong in any later settlement. You do not need to sign up anywhere to be in a class.
Is There Any Money?
For context only: data breach cases that do settle usually offer reimbursement of documented losses, a smaller flat payment for people who document nothing, and credit monitoring. How much each person gets depends on the fund size and how many people file. Our data breach settlement calculator shows how those numbers interact. Nothing here predicts what this case will pay, or whether it will pay anything.
NFM Lending Lawsuit Timeline
- 1
September 7, 2026 — Interlock Claims the Hack
Dark-web monitoring sites detect Interlock's post claiming a breach of NFM Lending and more than 2.5 terabytes of data.
- 2
September 11, 2026 — First Lawsuit
Koppenhaver v. NFM Lending, LLC (1:26-cv-03607) is filed in federal court in Maryland.
- 3
September 14–17, 2026 — Four More Suits
Romancik, Clark, Smith and Richardson follow. Smith (1:26-cv-03661) alleges NFM had not yet notified customers.
- 4
September 24, 2026 — NFM Statement Reported
NFM confirms unauthorized access but says it cannot confirm how many people were affected. ICE says its Encompass system was not breached.
- 5
September 29, 2026 — Sixth Suit
Salvi v. NFM Lending, LLC (1:26-cv-03862) is filed in the same court.
- 6
As of October 12, 2026 — No Settlement
Six proposed class actions are open. No settlement, no claim form, no deadline, and no public count of people affected.
Three Things to Watch For
A mortgage-data breach with no official count of victims gives fraudsters plenty to work with:
“Your NFM loan payment address has changed”
Stolen loan files show who you pay and how much, so expect convincing emails asking you to send mortgage payments somewhere new. Confirm any change by calling the number on your own statement, not the one in the message.
“Claim your NFM Lending settlement”
There is no settlement and no claims site. A page asking for your Social Security number or bank details to “register” is collecting data, not filing a claim.
Fake breach notices with a link or phone number
A real NFM notice may come by mail and may offer credit monitoring. Before you enroll, check the enrollment code and the company against NFM's own website. No real notice asks you to pay or to read out your full Social Security number.
NFM Lending Lawsuit — Questions People Actually Ask
What is the NFM Lending lawsuit about?
It is a data breach case. After the ransomware group Interlock claimed around September 7, 2026 that it stole more than 2.5 terabytes of NFM data, six proposed class actions were filed in the U.S. District Court for the District of Maryland. They allege NFM failed to protect borrowers' Social Security numbers and financial records.
Is there an NFM Lending settlement or claim form?
No. As of October 12, 2026 the cases are at the complaint stage. There is no settlement, no fund, no claim form and no deadline. If that changes, a court-appointed administrator will notify class members.
Was my information in the NFM Lending data breach?
Nobody can say yet. In the statement reported September 24, 2026, NFM said it could not confirm how many people were affected. Watch your mail for a breach notice from NFM. The attackers claim customer and employee data was taken, but that is their claim, not a confirmed list.
Who is the owner of NFM Lending?
NFM Lending says it was founded in Baltimore in 1998 by a married couple who are still involved in running it. It is headquartered in Linthicum, Maryland, is licensed in 49 states and DC, and has more than 1,000 employees. Its brands include Main Street Home Loans, BluPrint Home Loans, Elevate Home Loans and Element Home Loans.
Which court is handling the NFM Lending cases?
The U.S. District Court for the District of Maryland. The earliest case is Koppenhaver v. NFM Lending, LLC, No. 1:26-cv-03607; the most-reported one is Smith v. NFM Lending, LLC, No. 1:26-cv-03661-JKB, before Judge James K. Bredar.
Was Encompass or ICE hacked?
Interlock posted a screenshot that it says shows Encompass data. Intercontinental Exchange (ICE), which owns Encompass, told National Mortgage News that neither ICE nor its systems, including Encompass, were breached in connection with the NFM incident.
Do I need to join the NFM Lending lawsuit?
No. If a class is certified or a settlement is approved, you are included automatically unless you opt out. There is nothing to sign up for now. Hiring a lawyer is your choice, but it is not a registration step.
What should I do right now?
Freeze your credit at all three bureaus. It is free and reversible. Confirm any change to where you send your mortgage payment by calling your servicer at the number on your statement. Keep any breach notice you get from NFM.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Academy Mortgage Data Breach
Another mortgage lender breach case, for comparison
Open Class Action Settlements
Settlements you can claim from right now, with deadlines
Data Breach Settlement Calculator
Estimate what breach settlements typically pay per person
Settlement Payout Calculator
How claim rates and fund size shape individual payouts